Begin with your most critical systems. Automate repetitive investigations first. Expand integrations over time. Allow analysts to learn alongside the technology. This approach not only accelerates adoption but also develops stronger analysts. When AI shows each investigative step, teams continue… Read More "4 barriers to AI adoption in enterprise SOCs"
Microsoft Fixes 400 Flaws on August Patch Tuesday
Microsoft turned up the heat on sysadmins for the second month in a row on August 11 with a Patch Tuesday comprising 400 CVEs, including one actively exploited zero-day vulnerability. The figure is not quite as high as the record… Read More "Microsoft Fixes 400 Flaws on August Patch Tuesday"
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
North Korean hackers have been exploiting a newly patched Windows zero-day vulnerability to take over victims’ systems, Check Point reports. Attributed to the infamous Lazarus Group APT, the attacks represent a continuation of the long-running Operation Dream Job campaign targeting… Read More "Fresh Windows Zero-Day Exploited in North Korean Cyberattacks"
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
Ravie LakshmananAug 12, 2026Enterprise Security / Vulnerability SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0… Read More "SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code"
17 old software bugs that took way too long to squash
“While investigating an unrelated vulnerability, Trellix Advanced Research Center stumbled across a vulnerability in Python’s tarfile module,” Kasimir Schulz, a vulnerability researcher for Trellix’s Threat Labs, wrote on the firm’s blog. “Initially we thought we had found a new zero-day… Read More "17 old software bugs that took way too long to squash"
Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks
As organizations turn to Anthropic and OpenAI-powered agents to automate vulnerability discovery and patch management, researchers have warned that the extensive access these tools require could transform them into potential attack vectors. A new report published by the AI Now… Read More "Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks"
Stop chasing your team for security questionnaire answers
It’s 11:40 am. A security questionnaire just hit your inbox. You open the file and quickly realize you can’t finish this alone. Legal needs to review the data processing language. Product has to complete the architecture section. Security is the… Read More "Stop chasing your team for security questionnaire answers"
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers
Swati KhandelwalAug 11, 2026Insider Threat / Cyber Espionage Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued was recording. The onboarding paperwork is the… Read More "Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers"
New ‘GigaWiper’ Malware Combines Espionage & Destructive Capabilities
A new multi-purpose backdoor recently discovered by Microsoft marks a dangerous shift toward unified cyber-attack frameworks. The backdoor, tracked as GigaWiper, is linked to a malware implant with extensive operational capabilities, allowing cyber threat actors to conduct both quiet espionage… Read More "New ‘GigaWiper’ Malware Combines Espionage & Destructive Capabilities"
Cisco Patches Firewall Zero-Day Exploited for DoS Attacks
Cisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. The security hole, tracked as CVE-2026-20349, is related to the… Read More "Cisco Patches Firewall Zero-Day Exploited for DoS Attacks"